Vulnerabilitycritical

Threat Brief: OMI Vulnerabilities (CVE-2021-38645, CVE-2021-38647, CVE-2021-38648 and CVE-2021

Palo Alto Unit 42by Nathaniel QuistJun 6, 2024 · 01:21 UTC (Jun 6, 2024)2 min read4 · 1 read

Read at unit42.paloaltonetworks.com

Analyze CVE-2021-38645 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-38645 CVE-2021-38647 CVE-2021-38648 CVE-2021-38649

Tags: cve-2021-38645 cve-2021-38647 cve-2021-38648 cve-2021-38649 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-38647 +3 related CVEs CVE-2021-38648 CVE-2021-38645 CVE-2021-38649	Unauthenticated RCE in Microsoft Open Management Infrastructure (OMI)	9.8 group max	100%	KEVRansomwarePoC	Sep 15, 2021 KEV Nov 3, 2021

From the original article

2 min read at unit42.paloaltonetworks.com

On Sept. 14, 2021, Microsoft’s Security Response Center (MSRC) released security patches detailing the findings of four critical vulnerabilities affecting the Microsoft Azure package Open Management Infrastructure (OMI) .

Palo Alto Unit 42

By Nathaniel Quist · unit42.paloaltonetworks.com

Read the full article at Palo Alto Unit 42

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.